ginnoir
8558872362
docker-compose.yml: - Remove jackett and nzbhydra2 services - Fix restart: "no" → unless-stopped on deluge, nzbget, sonarr, radarr, bazarr, tautulli - Fix restart: always → unless-stopped on owncloud, mariadb (owncloud), redis (owncloud) - Add backdoor host ports: portainer 9100:9000, uptime-kuma 3001:3001, homarr 7575:7575 Caddyfile: - Remove jackett.ginnoir.com and hydra.ginnoir.com blocks - Drop stray @httpget redirect blocks from freshrss, resume, storage.j-costa.com - Simplify resume.ginnoir.com (drop redundant https:// host alias) - Fix tab indentation in j-costa.com and storage.j-costa.com tls blocks - Fix space indent in dev.ginnoir.com .env: - Remove unused famapp_MINIO_ENDPOINT (hardcoded in compose) - Remove unused NEXT_PUBLIC_APP_URL
106 lines
4.6 KiB
Bash
106 lines
4.6 KiB
Bash
# =============================================================
|
|
# BASE CONFIG
|
|
# =============================================================
|
|
# Timezone: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones
|
|
TZ=America/Chicago
|
|
# UNIX PUID and PGID — find with: id $USER
|
|
PUID=1000
|
|
PGID=1000
|
|
# Root path prefix for volume mounts
|
|
ROOT=/
|
|
|
|
# =============================================================
|
|
# FOUNDRY VTT
|
|
# =============================================================
|
|
FOUNDRY_USERNAME=ginnoir
|
|
FOUNDRY_PASSWORD=agt-UAU!uky_ykh3juy
|
|
FOUNDRY_ADMIN_KEY=fuckyouben
|
|
FOUNDRY_PATCH_URLS=https://gist.githubusercontent.com/ginnoir/898b152a09369f9089770daa71887262/raw/a354e4284f2b1feb616910f65bfe65a4ffdb5473/plutonium-12.x.sh
|
|
|
|
# =============================================================
|
|
# OWNCLOUD
|
|
# =============================================================
|
|
OWNCLOUD_DOMAIN=files.ginnoir.com
|
|
OWNCLOUD_DB_USER=ginnoir
|
|
OWNCLOUD_DB_PASSWORD=d0fet0th3x
|
|
OWNCLOUD_ADMIN_USER=ginnoir
|
|
OWNCLOUD_ADMIN_PASSWORD=d0fet0th3x
|
|
|
|
# =============================================================
|
|
# MARIADB
|
|
# =============================================================
|
|
MYSQL_ROOT_PASSWORD=d0fet0th3x
|
|
|
|
# =============================================================
|
|
# REACTIVE RESUME
|
|
# =============================================================
|
|
POSTGRES_PASSWORD=postgres
|
|
MINIO_ROOT_USER=minioadmin
|
|
MINIO_ROOT_PASSWORD=minioadmin
|
|
CHROME_TOKEN=chrome_token
|
|
# Auth/JWT signing secret for Reactive Resume — the `app` service reads
|
|
# ${RESUME_AUTH_SECRET}. Pinned to the value the running container already uses,
|
|
# so recreating it does not invalidate sessions. Rotate with: openssl rand -hex 64
|
|
RESUME_AUTH_SECRET=1b7e96f61f080d04d4bf673d9ea1d9349eb7693cddee5772b6c3f153c88032db5b97efd8570087bc6f340d2cd874aabc1e5c681bc22889921240d6a23738bc7f
|
|
|
|
# =============================================================
|
|
# FRESHRSS
|
|
# =============================================================
|
|
FRESHRSS_API_PASSWORD=d0fet0th3x
|
|
FRESHRSS_PASSWORD=d0fet0th3x
|
|
FRESHRSS_EMAIL=3nigma.matt@gmail.com
|
|
|
|
# ── famapp ────────────────────────────────────────────────────────────────────
|
|
FAMAPP_IMAGE=ghcr.io/ginnoir/famapp:latest
|
|
FAMAPP_PULL_POLICY=always
|
|
AUTHENTIK_IMAGE_TAG=2024.12.3
|
|
RUN_MIGRATIONS=true
|
|
|
|
AUTH_URL=https://fam.ginnoir.com
|
|
FAMAPP_DB_USER=famapp
|
|
FAMAPP_DB_PASSWORD=a9a999d16dd5cdc521bb62eff331265d3c24
|
|
FAMAPP_DB_NAME=famapp
|
|
|
|
# famapp Auth.js session secret (compose maps this to the container's AUTH_SECRET)
|
|
FAMAPP_AUTH_SECRET=CJsICgBs78YxxSdJfS8KU9Zn9k+QytRoVui9kVtuHtI=
|
|
|
|
# Fill in after Authentik bootstrap
|
|
AUTH_OIDC_ISSUER=https://auth.ginnoir.com/application/o/famapp/
|
|
AUTH_OIDC_CLIENT_ID=6uOZ8yjTR9Z2m1RZU1cLHYXHV2Lv6zZtfuJcrsdq
|
|
AUTH_OIDC_CLIENT_SECRET=CPcNM8jXaJ2jHFKxRwGuuKyMKJsT502l3FztO1AOcFqDzWqlWu5x7Ox52Q6zyBa2v33YzoA9igrXW8FFjd1Gp7wrZV4PGTwvXmOd7pIMOY93gNotAgJaewT8WHW1F3YD
|
|
|
|
VAPID_PUBLIC_KEY=BNED_UgfPhyoG6_JOabhpQpN3nr6QM5tO0PDiAadMGCcZROn8LM7tnsBrKaB1E5kfuDFb1rC_M86cT3uCvBqSBk
|
|
VAPID_PRIVATE_KEY=QyJiyCI2TJa_QWVXznfj4vjpWTBsyFfSCtn1brpE9aI
|
|
VAPID_SUBJECT=mailto:3nigma.matt@gmail.com
|
|
|
|
NTFY_URL=https://ntfy.ginnoir.com
|
|
NTFY_TOPIC=famapp
|
|
|
|
AUTHENTIK_DB_USER=authentik
|
|
AUTHENTIK_DB_PASSWORD=ebb7d34ecbc4fc8f95cd16ef491d2162cdf8
|
|
AUTHENTIK_DB_NAME=authentik
|
|
AUTHENTIK_SECRET_KEY=C33S/oXOVOLrlLnWGMRYadgH9zfEC7Bm1vHtbczkFxHcTOj9j6io397c/OGb
|
|
|
|
# MinIO object storage (used for plant/container image uploads)
|
|
famapp_MINIO_ROOT_USER=famapp
|
|
famapp_MINIO_ROOT_PASSWORD=d0fet0th3x
|
|
famapp_MINIO_BUCKET=garden
|
|
|
|
famapp_OPENPLANTBOOK_CLIENT_ID=5JdQLab69RhVaF4er7b7D29BCrkf3fo3OEiDsOQa
|
|
famapp_OPENPLANTBOOK_CLIENT_SECRET=kxPTrdQPAVta7sjVuIRf5EGIJ1fKvlMlqRSJpQtFxRftJhg7oeGnXzwH7ls6tluQLFUYVDYRMwISiAuKZGZLvkuJzUwFGCwhZw7UtW8OvcTGy4717WeNUinvuCDSsNXP
|
|
|
|
# =============================================================
|
|
# MANAGEMENT (homarr)
|
|
# =============================================================
|
|
# Homarr config encryption key (moved out of docker-compose.yml so all
|
|
# secrets live in .env). Generate with: openssl rand -hex 32
|
|
HOMARR_SECRET_ENCRYPTION_KEY=98989838bf06c9e42d77944ce848963a22ab316b55a09b0d199652ef0934394f
|
|
|
|
# =============================================================
|
|
# CLOUDFLARE DNS (for Caddy DNS-01 TLS challenge)
|
|
# =============================================================
|
|
# Create a scoped API token at: https://dash.cloudflare.com/profile/api-tokens
|
|
# Required permissions: Zone > DNS > Edit (for ginnoir.com zone only)
|
|
# This is NOT the Zone ID or Account ID — it's the API Token secret value.
|
|
CF_API_TOKEN=cfut_ijIT9HDjXWKgd0dtnyLqxv8L3deB7hSDivSqquwp905a6c51
|